Static task
static1
Behavioral task
behavioral1
Sample
7a6c6890028ab340f918ef1116a4db9cc852d899290bd1e99b0b8565553768ab.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
7a6c6890028ab340f918ef1116a4db9cc852d899290bd1e99b0b8565553768ab.exe
Resource
win10v2004-en-20220112
General
-
Target
7a6c6890028ab340f918ef1116a4db9cc852d899290bd1e99b0b8565553768ab
-
Size
111KB
-
MD5
cb5081d3b8af578c247dab9bd5e16841
-
SHA1
b4870d7b1f6a9f531259efc74a9468d8a045d8f0
-
SHA256
7a6c6890028ab340f918ef1116a4db9cc852d899290bd1e99b0b8565553768ab
-
SHA512
5bd6e7f2e04abb6d1d5f640730f7d60c1f202b6440e0888bba15708b4b88acb669a138aaf31d5782ce6409ab74970614970cda99dde1ef757299a4f61b257f28
-
SSDEEP
1536:H0t5egSmb+0uLkR093G9zWRsLm3PBaw38A3IswtivQD8sWiR7cdQ1+FfH6sRA+:HMwm6yYEzWRxPBZMJcwRqQEFvPz
Malware Config
Signatures
Files
-
7a6c6890028ab340f918ef1116a4db9cc852d899290bd1e99b0b8565553768ab.exe windows x86
28345d761d94d617187a4e7bb791c4ef
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
ExitProcess
GetCurrentThread
SetLastError
Sleep
LoadLibraryA
GetCommandLineW
GetTempPathW
GetVersionExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GlobalAlloc
GetProcAddress
WinExec
FreeLibrary
DecodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
RaiseException
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetStringTypeW
LCMapStringW
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
CreateFileW
ws2_32
WSACleanup
WSAStartup
socket
setsockopt
sendto
inet_addr
htons
htonl
closesocket
bind
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ